📄️ ALERT_DETAILS_V View
This view provides detailed W5 information (such as process and machine details) about generated events (alerts).
📄️ ALERT_EVIDENCE_V View
This view reports details about the evidence or observation details of individual events.
📄️ ALERTS_V View
This view provides raw historic data about generated events (alerts). The AlertsV View provides metadata about the alert (including severity). For comprehensive details about the alert, see ALERTSDETAILS_V View.
📄️ ALL_FILES_V View
This view provides raw historic data about files.
📄️ APPLICATIONS_V View
This view provides the applications running on the machine with an agent installed with details (such as application name, user name, machine, etc.) within the last 90 days.
📄️ CHANGE_FILES_V View
This view provides a historical summary of changed files with some aggregation. A file is ‘changed’ when it is added or modified.
📄️ CLOUD_COMPLIANCE_V View
This view contains details (such as compliance status, violated resources, reason, recommendation, account info, etc.) about compliance violations identified by Lacework cloud assessments that occurred within the last 90 days.
📄️ CLOUD_CONFIGURATION_V View
This view reports details about supported and configured cloud resources.
📄️ CLOUD_RESOURCES_V View
The CLOUDRESOURCESV view is now deprecated. Use CLOUDCONFIGURATIONV, which replaces this view.
📄️ CMDLINE_V View
This view provides raw historic data about command line invocations.
📄️ CONNECTIONS_V View
This view provides raw historic data about connections.
📄️ CONTAINER_SUMMARY_V View
This view provides a historical summary of containers with some aggregation.
📄️ CONTAINER_VULN_DETAILS_V View
This view provides container vulnerability assessment details (such as CVE ID, Image ID, Package info, fix info, etc.) about a discovered vulnerability in an Image within the last 90 days.
📄️ DNS_QUERY_V View
This view provides raw historic data about DNS queries.
📄️ HOST_VULN_DETAILS_V View
This view provides host vulnerability assessment details (such as CVE ID, Machine Id, Package info, fix info etc) about a discovered vulnerability in a host within the last 90 days.
📄️ IMAGE_V View
This view provides details about the container image.
📄️ INTERFACES_V View
This view provides raw historic data about network interfaces.
📄️ INTERNAL_IPA_V View
This view provides a historical summary of internal IP addresses with some aggregation.
📄️ MACHINE_DETAILS_V View
This view provides raw historic data about machines found in your environment.
📄️ MACHINE_SUMMARY_V View
This view provides a historical summary of machines with some aggregation.
📄️ NEW_HASHES_V View
This view provides a historical summary of new file hashes with some aggregation.
📄️ PACKAGE_V View
This view provides raw historic data about the packages found in your environment.
📄️ POD_SUMMARY_V View
This view provides a historical summary of pods with some aggregation. A pod is a collection of one or more running containers. For more information, see Pod Overview.
📄️ PROCESS_SUMMARY_V View
This view provides a historical summary of processes with some aggregation.
📄️ USER_DETAILS_V View
This view provides raw historic data about users.
📄️ USER_LOGIN_V View
This view provides raw historic data about user login/logout activity.